MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #184 from cvandeplas/master 

threatanalyzer_import - fix regkey issue
pull/188/head
Christophe Vandeplas 2018-05-02 12:44:13 +02:00 committed by GitHub
parent d29e300312 370011c081
commit 35a19b118a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
misp_modules/modules/import_mod/threatanalyzer_import.py
View File

@ -457,8 +457,6 @@ def cleanup_regkey(item):
r'\\Local Settings\\Software\\Microsoft\\Windows\\Shell\\Bag', r'\\Local Settings\\Software\\Microsoft\\Windows\\Shell\\Bag',
r'\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\RunMRU\\' r'\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\RunMRU\\'
} }
item = item.replace('\\REGISTRY\\MACHINE\\', 'HKLM\\')
item = item.replace('\\REGISTRY\\USER\\', 'HKCU\\')
if list_in_string(noise_substrings, item, regex=True): if list_in_string(noise_substrings, item, regex=True):
return None return None
return item return item